Row Level Security applicable to limited people with everyone else having full access

[jashjacob]

Hi Everyone,

I have a requirement in a report which needs most people who have access to be able to view everything with a few (around 5) people who should have limited access. How can I handle RLS such that I do not need to add every user to a RLS group, but only those who need to be limited.

To explain further, a few contractors have to view the report, but they should view only data related to them which is determined by a code.

[v-yanjiang-msft · Accepted solution]

Hi @jashjacob ,

I have two solutions about your problem.

Method1

1.Set RLS for the five people and then give viewer access to them in service.

2.Give the other people contributor access.

Method2

1.If you have access to admin center, you can create a distribution or security group with people having full access to the report, provide limited content for the five people when setting up RLS, while others all content.

2.Give all people viewer access.

Best Regards,
Community Support Team _ kalyj

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[jashjacob]

Thanks a lot. This helped.

[GilbertQ]

Hi @jashjacob 

What I would do is to create the required roles in Power BI Desktop.

Then I would get 2 AAD or Office 365 groups created. One group would be the admin group. You can then add this group to the admin role. Then another role for the other 5 users and this would be added to the other role.

Unfortunately if you wanted a single report, you have to have both an Admin Role and other roles to enable RLS.